Support volume patch path for different resource kinds

policies/pod/empty_dir_size_limit.go

@@ -48,7 +48,7 @@ func (p PolicyEmptyDirSizeLimit) Validate(ctx context.Context, config policies.C
 		if volume.EmptyDir.SizeLimit == nil || volume.EmptyDir.SizeLimit.IsZero() {
 			patches = append(patches, policies.PatchOperation{
 				Op:    "replace",
-				Path:  fmt.Sprintf("/spec/volumes/%d/emptyDir/sizeLimit", i),
+				Path:  fmt.Sprintf(volumePatchPath(podResource.ResourceKind)+"/%d/emptyDir/sizeLimit", i),
 				Value: cfg.DefaultSizeLimit.String(),
 			})
 			continue
@@ -66,3 +66,16 @@ func (p PolicyEmptyDirSizeLimit) Validate(ctx context.Context, config policies.C
 	}
 	return resourceViolations, patches
 }
+
+const templateVolumePath = "/spec/template/spec/volumes"
+
+func volumePatchPath(podKind string) string {
+	nonTemplateKinds := map[string]string{
+		"Pod":     "/spec/volumes",
+		"CronJob": "/spec/jobTemplate/spec/template/spec/volumes",
+	}
+	if pathPath, ok := nonTemplateKinds[podKind]; ok{
+		return pathPath
+	}
+	return templateVolumePath
+}